This version is still in development and is not considered stable yet. For the latest stable version, please use Spring Security 7.0.4!

What’s New in Spring Security 7.1

Web

gh-18634 - Added InetAddressMatcher
gh-18755 - Include charset in WWW-Authenticate header
Added ConditionalAuthorizationManager
Added when and withWhen conditions to AuthorizationManagerFactories.multiFactor() for Programmatic MFA
Added MultiFactorCondition.WEBAUTHN_REGISTERED to @EnableMultiFactorAuthentication(when = …) for conditionally requiring MFA for WebAuthn Users